uima-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Burn Lewis <burnle...@gmail.com>
Subject Re: UIMA DUCC java.lang.SecurityException
Date Mon, 10 Oct 2016 17:44:33 GMT
Wahed,

We don't recommend using the DUCC broker for application services. It is
protected to ensure that daemon communication is not affected by any
outside use of the broker.  For application services you can start a broker
using the UIMA-AS startBroker script in ${DUCC_HOME}/apache-uima/bin.

But as Jerry has said the DUCC broker can be started without this security
by using the activemq-ducc-unsecure.xml configuration file ... we do this
in the start_sim script when testing with simulated nodes.  We also
recommend not changing default.ducc.properties .... adding an overriding
entry to site.ducc.properties is preferred as such changes are preserved
during migration.

~Burn

On Mon, Oct 10, 2016 at 10:41 AM, <Hemati@em.uni-frankfurt.de> wrote:

> Hi Jerry,
> thanks alot its working now. I can deploy services now.
>
> -Wahed
>
> Quoting Jaroslaw Cwiklik <uimaee@gmail.com>:
>
> Wahed, I just reconfigured my ducc with a one line change in
>> DUCC_HOME/resources/default.ducc.properties
>>
>> from:
>> ducc.broker.configuration = conf/activemq-ducc.xml
>>
>> to:
>> ducc.broker.configuration = conf/activemq-ducc-unsecure.xml
>>
>> I can deploy services with no errors.
>>
>> Jerry
>>
>>
>> On Mon, Oct 10, 2016 at 9:38 AM, Jaroslaw Cwiklik <uimaee@gmail.com>
>> wrote:
>>
>> Wahed, actually this is not a bug. Ducc by default runs with a secure
>>> broker. Meaning that all destinations (queues, topics) are password
>>> protected. The exception you are seeing is coming from a service unable
>>> to
>>> authenticate. I am not sure if this is documented, but to use services
>>> you
>>> need to use a separate broker or run Ducc with an unsecured broker. The
>>> easiest is the latter. To run in unsecure mode:
>>>
>>> In DUCC_HOME/resources/default.ducc.properties find the following
>>>
>>> ducc.broker.configuration = conf/activemq-ducc.xml
>>>
>>> and change it to:
>>>
>>> ducc.broker.configuration = conf/activemq-ducc-unsecure.xml
>>>
>>> I am not 100% sure but you may also need to comment out a line in the
>>> same
>>> file
>>>
>>> ducc.broker.credentials.file=${ducc.private.resources}/ducc-
>>> broker-credentials.properties
>>>
>>> I will try the above changes and confirm this shortly.
>>>
>>> Jerry
>>>
>>>
>>> On Mon, Oct 10, 2016 at 7:55 AM, Wahed Hemati <
>>> hemati@em.uni-frankfurt.de>
>>> wrote:
>>>
>>> Thanks Jerry,
>>>>
>>>> i rebuild it from trunk but still get the same error.
>>>>
>>>> when i run ./admin/ducc_statedump -p 61617 i get the following:
>>>>
>>>> javax.jms.JMSSecurityException: User name [null] or password is
>>>> invalid.
>>>>     at org.apache.activemq.util.JMSExceptionSupport.create(JMSExcep
>>>> tionSupport.java:52)
>>>>     at org.apache.activemq.ActiveMQConnection.syncSendPacket(Active
>>>> MQConnection.java:1393)
>>>>     at org.apache.activemq.ActiveMQConnection.ensureConnectionInfoS
>>>> ent(ActiveMQConnection.java:1496)
>>>>     at org.apache.activemq.ActiveMQConnection.createSession(ActiveM
>>>> QConnection.java:324)
>>>>     at org.apache.uima.ducc.tools.DuccPubListener.connect(DuccPubLi
>>>> stener.java:88)
>>>>     at org.apache.uima.ducc.tools.DuccPubListener.run(DuccPubListen
>>>> er.java:183)
>>>>     at org.apache.uima.ducc.tools.DuccPubListener.main(DuccPubListe
>>>> ner.java:283)
>>>> Caused by: java.lang.SecurityException: User name [null] or password is
>>>> invalid.
>>>>     at org.apache.activemq.security.SimpleAuthenticationBroker.auth
>>>> enticate(SimpleAuthenticationBroker.java:103)
>>>>     at org.apache.activemq.security.SimpleAuthenticationBroker.addC
>>>> onnection(SimpleAuthenticationBroker.java:71)
>>>>     at org.apache.activemq.broker.BrokerFilter.addConnection(Broker
>>>> Filter.java:98)
>>>>     at org.apache.activemq.broker.MutableBrokerFilter.addConnection
>>>> (MutableBrokerFilter.java:103)
>>>>     at org.apache.activemq.broker.TransportConnection.processAddCon
>>>> nection(TransportConnection.java:817)
>>>>     at org.apache.activemq.broker.jmx.ManagedTransportConnection.pr
>>>> ocessAddConnection(ManagedTransportConnection.java:77)
>>>>     at org.apache.activemq.command.ConnectionInfo.visit(ConnectionI
>>>> nfo.java:139)
>>>>     at org.apache.activemq.broker.TransportConnection.service(Trans
>>>> portConnection.java:338)
>>>>     at org.apache.activemq.broker.TransportConnection$1.onCommand(T
>>>> ransportConnection.java:188)
>>>>     at org.apache.activemq.transport.MutexTransport.onCommand(Mutex
>>>> Transport.java:50)
>>>>     at org.apache.activemq.transport.TransportFilter.onCommand(Tran
>>>> sportFilter.java:69)
>>>>     at org.apache.activemq.transport.WireFormatNegotiator.onCommand
>>>> (WireFormatNegotiator.java:125)
>>>>     at org.apache.activemq.transport.AbstractInactivityMonitor.onCo
>>>> mmand(AbstractInactivityMonitor.java:300)
>>>>     at org.apache.activemq.transport.TransportSupport.doConsume(Tra
>>>> nsportSupport.java:83)
>>>>     at org.apache.activemq.transport.tcp.TcpTransport.doRun(TcpTran
>>>> sport.java:233)
>>>>     at org.apache.activemq.transport.tcp.TcpTransport.run(TcpTransp
>>>> ort.java:215)
>>>>     at java.lang.Thread.run(Thread.java:745)
>>>>
>>>> is it somehow related?
>>>>
>>>>
>>>> -Wahed
>>>>
>>>>
>>>>
>>>
>
> --
> A. Wahed Hemati
> Text-Technology Lab
> Fakultät für Informatik und Mathematik
> Johann Wolfgang Goethe-Universität Frankfurt am Main
> Senckenberganlage 31, Raum 401c
> 60325 Frankfurt am Main
> Postfach: 154
> Tel: +49 69-798-28925
> Email: hemati@em.uni-frankfurt.de
> Web: http://www.hucompute.org/
>
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message